commit 2fe6c638e2a4f3590dddab1b3ef28d99db1a9f7f
author Jerry Yu <jerry.h.yu@arm.com> Wed Jun 29 10:02:38 2022 +0800
committer Jerry Yu <jerry.h.yu@arm.com> Wed Jun 29 16:20:17 2022 +0800
tree ec94c14f5899bfb0c1ec975b7401c0a1e8bfd36f
parent 959e5e030b9211f98a01f90d806d16796ff59e84

remove supported check from parse sig algs

Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>

library/ssl_tls.c

diff --git a/library/ssl_tls.c b/library/ssl_tls.c
index c5717c0..c2f1f85 100644
--- a/library/ssl_tls.c
+++ b/library/ssl_tls.c
@@ -4915,9 +4915,17 @@
         MBEDTLS_SSL_DEBUG_MSG( 4, ( "received signature algorithm: 0x%x %s",
                                     sig_alg,
                                     mbedtls_ssl_sig_alg_to_str( sig_alg ) ) );
-
-        if( ! mbedtls_ssl_sig_alg_is_supported( ssl, sig_alg ) )
+#if defined(MBEDTLS_SSL_PROTO_TLS1_2)
+        if(
+#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
+            ssl->tls_version == MBEDTLS_SSL_VERSION_TLS1_2 &&
+#endif /* MBEDTLS_SSL_PROTO_TLS1_3 */
+            ( ! ( mbedtls_ssl_sig_alg_is_supported( ssl, sig_alg ) &&
+                  mbedtls_ssl_sig_alg_is_offered( ssl, sig_alg ) ) ) )
+        {
             continue;
+        }
+#endif /* MBEDTLS_SSL_PROTO_TLS1_2 */
 
         MBEDTLS_SSL_DEBUG_MSG( 4, ( "valid signature algorithm: %s",
                                     mbedtls_ssl_sig_alg_to_str( sig_alg ) ) );